Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3365353a3a2f34382d3438203d3e20333936393933.roa
File:                     323630323a663734333a3365353a3a2f34382d3438203d3e20333936393933.roa (raw, json)
Hash identifier:          1lpl5E1Kzf5CEXo5KterE5UGLcS3Utf0oQtzYF9WUNM=
Subject key identifier:   84:A2:67:BD:E4:2D:E7:69:96:60:85:97:1F:F9:2E:05:BA:58:10:CB
Certificate issuer:       /CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3
Certificate serial:       5782BDE2AC4855FEA6E9E81DA676EB7949362FC1
Authority key identifier: 30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3365353a3a2f34382d3438203d3e20333936393933.roa
Signing time:             Wed 11 Jun 2025 23:57:59 +0000
ROA not before:           Wed 11 Jun 2025 23:52:59 +0000
ROA not after:            Wed 10 Jun 2026 23:57:59 +0000
asID:                     396993
IP address blocks:        2602:f743:3e5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl
                          rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 05:23:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:82:bd:e2:ac:48:55:fe:a6:e9:e8:1d:a6:76:eb:79:49:36:2f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3
        Validity
            Not Before: Jun 11 23:52:59 2025 GMT
            Not After : Jun 10 23:57:59 2026 GMT
        Subject: CN=84A267BDE42DE769966085971FF92E05BA5810CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f0:9f:70:a1:ba:03:90:ff:54:87:71:9c:86:
                    be:57:0b:79:9c:88:e2:b8:eb:19:db:a8:c1:60:89:
                    ed:09:8a:e0:60:c9:09:3c:b9:07:8f:41:1c:90:0d:
                    77:78:db:52:58:33:fe:44:0c:42:80:3a:29:89:68:
                    e5:a3:1b:cd:0a:ba:16:6e:53:3c:87:3c:6f:ee:a0:
                    11:2c:bc:cf:c2:8c:eb:97:ce:de:9a:48:b3:e4:db:
                    21:1b:c2:49:d2:04:ec:5d:b2:91:48:52:d4:5a:3e:
                    32:2b:71:e7:87:6e:93:df:6c:c0:67:b9:d2:eb:2c:
                    de:50:97:bc:56:45:cc:2e:18:71:14:af:17:b5:e6:
                    ae:9f:22:f8:0e:37:a7:be:b8:95:15:b2:2c:b8:0c:
                    a8:a6:88:a4:f0:e7:5e:7f:a2:ac:7c:8a:ba:8a:f6:
                    41:8b:83:02:ba:22:fc:41:d6:55:22:a2:c0:5e:0e:
                    49:62:22:a9:fe:cb:6e:55:4b:76:78:15:36:dd:16:
                    78:6d:f1:b8:1d:55:8a:cf:ce:54:99:a2:ad:cd:4d:
                    6e:0d:ff:d7:52:6c:d8:a4:5a:80:25:11:50:f3:22:
                    80:7b:f0:bf:3b:54:ec:3a:74:4c:39:fd:df:a8:7d:
                    6f:28:d9:e8:f1:8c:49:47:e4:0f:b9:ac:3c:55:85:
                    94:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A2:67:BD:E4:2D:E7:69:96:60:85:97:1F:F9:2E:05:BA:58:10:CB
            X509v3 Authority Key Identifier:
                keyid:30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3365353a3a2f34382d3438203d3e20333936393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f743:3e5::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:d9:9b:dc:bd:eb:cb:20:55:f3:1b:49:09:88:75:c2:6f:16:
         e5:bd:91:70:1f:f2:5a:75:d7:c7:79:6d:f7:0d:54:3c:df:8b:
         17:8c:b4:ce:a9:11:1c:e5:c8:34:7b:48:e2:01:1b:55:7d:91:
         6d:f4:bd:35:8d:89:a4:a2:0d:f1:b7:2c:62:b1:50:64:88:ed:
         56:35:7a:e1:ff:a4:e3:0d:66:ca:40:62:c0:c6:ea:e5:a5:03:
         ee:3a:ce:4c:bb:a9:cf:ef:ce:03:e8:02:a6:35:d5:5e:ea:b7:
         2c:e2:63:cb:a3:95:3e:8a:cf:66:58:4a:c2:d4:66:2a:df:e4:
         90:e8:20:42:2f:77:bb:fb:77:d2:8e:98:03:c8:c7:47:e1:74:
         66:ca:6d:e9:13:c8:2c:e3:00:0d:92:3b:4b:61:ef:aa:c0:07:
         ff:f6:e1:ba:18:b2:1c:88:1c:9a:92:51:2b:a7:a1:23:0a:6e:
         e4:da:9c:1e:91:f2:2f:17:21:e7:bc:eb:5e:f0:11:91:0d:b2:
         6a:70:d1:a7:6f:8b:c9:81:5b:31:16:10:83:da:69:bf:84:13:
         bd:1c:6c:42:53:74:0f:5d:8f:37:88:85:e7:92:d0:fe:50:2a:
         41:4c:a6:37:30:f5:0f:40:0e:40:7d:c2:db:75:90:47:40:a1:
         0e:b0:0e:95
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUV4K94qxIVf6m6egdpnbreUk2L8EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDM3MjE1OTRkYTk0MjRiOTQ5ZDdjNjk1ZjAyZGVhZDdh
YmZmNDBiYTQyNmEyZTQxZjMwHhcNMjUwNjExMjM1MjU5WhcNMjYwNjEwMjM1NzU5
WjAzMTEwLwYDVQQDEyg4NEEyNjdCREU0MkRFNzY5OTY2MDg1OTcxRkY5MkUwNUJB
NTgxMENCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPCfcKG6A5D/
VIdxnIa+Vwt5nIjiuOsZ26jBYIntCYrgYMkJPLkHj0EckA13eNtSWDP+RAxCgDop
iWjloxvNCroWblM8hzxv7qARLLzPwozrl87emkiz5NshG8JJ0gTsXbKRSFLUWj4y
K3Hnh26T32zAZ7nS6yzeUJe8VkXMLhhxFK8XteaunyL4DjenvriVFbIsuAyopoik
8Odef6KsfIq6ivZBi4MCuiL8QdZVIqLAXg5JYiKp/stuVUt2eBU23RZ4bfG4HVWK
z85UmaKtzU1uDf/XUmzYpFqAJRFQ8yKAe/C/O1TsOnRMOf3fqH1vKNno8YxJR+QP
uaw8VYWUewIDAQABo4ICvTCCArkwHQYDVR0OBBYEFISiZ73kLedplmCFlx/5LgW6
WBDLMB8GA1UdIwQYMBaAFDBrdBpLMqK968y0xz2yUsUszz9RMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzI1ODg2YmM1OTJkZTRiMDU5NjU5YmI3OWVjMDhiYWNiLzAv
MzA2Qjc0MUE0QjMyQTJCREVCQ0NCNEM3M0RCMjUyQzUyQ0NGM0Y1MS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzLzU2NWY1NDM1LTVjZDEtNDhlNC05Y2ZjLTg0NGZjZDA2ZWZlMS80Mzcy
MTU5NGRhOTQyNGI5NDlkN2M2OTVmMDJkZWFkN2FiZmY0MGJhNDI2YTJlNDFmMy5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS8yNTg4NmJjNTkyZGU0YjA1OTY1OWJi
NzllYzA4YmFjYi8wLzMyMzYzMDMyM2E2NjM3MzQzMzNhMzM2NTM1M2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3QwPlMA0G
CSqGSIb3DQEBCwUAA4IBAQBQ2ZvcvevLIFXzG0kJiHXCbxblvZFwH/JaddfHeW33
DVQ834sXjLTOqREc5cg0e0jiARtVfZFt9L01jYmkog3xtyxisVBkiO1WNXrh/6Tj
DWbKQGLAxurlpQPuOs5Mu6nP784D6AKmNdVe6rcs4mPLo5U+is9mWErC1GYq3+SQ
6CBCL3e7+3fSjpgDyMdH4XRmym3pE8gs4wANkjtLYe+qwAf/9uG6GLIciByaklEr
p6EjCm7k2pwekfIvFyHnvOte8BGRDbJqcNGnb4vJgVsxFhCD2mm/hBO9HGxCU3QP
XY83iIXnktD+UCpBTKY3MPUPQA5AfcLbdZBHQKEOsA6V
-----END CERTIFICATE-----
Generated at Fri Jun 20 12:16:24 2025 by rpki-client